Snowflake Native App Release Sheriff

Purpose

Produce a deterministic, as-of provider-side release preflight. A clean result is READY_FOR_OPERATOR_RELEASE_AS_OF, never permission or an instruction to publish, set a release directive, upgrade an application, or alter privileges.

Prerequisites

Read both reference files before analysis. The input must use the exact schema-2 contract in references/evidence-contract.md and must include independently retained hashes for the whole bundle, manifest, setup script, normalized cohort rows/denominators, lifecycle evidence, and the complete rollback receipt including its artifact digest. Every array carries an explicit count; zero is evidence only when the owner-approved denominator is exactly zero.